Description
Adobe Illustrator version 24.1.2 (and earlier) is affected by a memory corruption vulnerability that occurs when parsing a specially crafted .svg file. This could result in arbitrary code execution in the context of the current user. This vulnerability requires user interaction to exploit.
Scores
CVSS v3
7.8
EPSS
0.0665
EPSS Percentile
91.2%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Details
CWE
CWE-787
CWE-788
Status
published
Products (1)
adobe/illustrator
< 24.2
Published
Oct 20, 2020
Tracked Since
Feb 18, 2026